2026-08-17 归档

今日共收录 803 条安全情报,包含 111 个 CVE,370 篇安全通告,以及 71 篇研究论文。

← 返回归档列表
漏洞预警2026-08-16 发布MEDIUM

A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipulation l...

CVE-2026-19956

CVE-2026-19956 是 gomarble-ai 的 facebook-ads-mcp-server 0.1.0 版本中存在的一个服务器端请求伪造(SSRF)漏洞。该漏洞位于 server.py 文件中的 fetch_paginat

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布LOW

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds ...

CVE-2026-19955

CVE-2026-19955 影响 TrailDB 0.6 版本。漏洞位于 /src/tdb.c 文件中的 tdb_open 函数,属于 TOC(Table of Contents)校验组件。攻击者可利用该漏洞触发越界读取(out-of-b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布MEDIUM

OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a trusted working di...

CVE-2026-74796

OpenTofu(Terraform 的开源替代品)在 1.11.7 之前版本中存在一个安全漏洞,该漏洞发生在初始化(tofu init)阶段。具体而言,OpenTofu 在初始化过程中未能正确验证 provider 缓存目录中已存在的符号

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布HIGH

Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the Expressi...

CVE-2026-74795

CVE-2026-74795 影响 Scriban 6.6.0 之前的版本。Scriban 是一个常用于 .NET 环境的轻量级模板引擎。该漏洞源于其递归下降解析器未对模板表达式的嵌套深度进行默认限制(ParserOptions 中的 Ex

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-16 发布HIGH

Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a...

CVE-2026-74792

CVE-2026-74792 是 Scriban 模板引擎(一个流行的 .NET 模板解析库)中的一个拒绝服务漏洞。漏洞存在于 7.0.0 之前的所有版本(包括 6.6.0)。根本原因是嵌套数组初始化器的解析过程存在递归调用链:ParseA

历史摘要 · 未重新核验 · NVD

威胁情报2026-08-17 发布INFO

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

Video Highlights the 4 Key Steps to Successful Incident ResponseDec 02, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Cloud ManagerManage your cloud computing services

Cloud ManagerManage your cloud computing services

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-17 发布INFO

See all Cloud Computing

See all Cloud Computing

历史摘要 · 未重新核验 · Akamai Security Research

威胁情报2026-08-17 发布INFO

智利银行在勒索软件攻击后关闭所有分行

智利银行在勒索软件攻击后关闭所有分行

历史摘要 · 未重新核验 · CNCERT

威胁情报2026-08-17 发布INFO

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

Helping Non-Security Stakeholders Understand ATT&CK in 10 Minutes or Less [VIDEO]Feb 21, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

Analyzing Targeted Intrusions Through the ATT&CK Framework Lens [VIDEO]Jan 22, 2019

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

Qatar’s Commercial Bank Chooses CrowdStrike Falcon®: A Partnership Based on Trust [VIDEO]Aug 20, 2018

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

How Charlotte AI AgentWorks Fuels Security's Agentic Ecosystem

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

CrowdStrike Services and Agentic MDR Put the Agentic SOC in Reach

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Threat Hunting & Intel

Threat Hunting & Intel

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Endpoint Security & XDR

Endpoint Security & XDR

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Engineering & Tech

Engineering & Tech

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

EMBER2024: Advancing the Training of Cybersecurity ML Models Against Evasive Malware

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

Falcon Platform Prevents COOKIE SPIDER’s SHAMOS Delivery on macOS

历史摘要 · 未重新核验 · CrowdStrike

威胁情报2026-08-17 发布INFO

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

CrowdStrike’s Approach to Better Machine Learning Evaluation Using Strategic Data Splitting

历史摘要 · 未重新核验 · CrowdStrike